Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa
File: f0a155c0-6bc3-3834-882d-5fc717f28856.roa (raw, json)
Hash identifier: +WqQvEt/rwM4vcGYjMgS5bijeMkh2XhZs9igFdSzDIs=
Subject key identifier: 38:EA:A3:9D:01:72:0F:A8:E6:29:31:78:7A:9D:18:F2:35:66:F7:B6
Certificate issuer: /CN=7f64ffea-e706-4e90-bb07-255a657996ab
Certificate serial: 010D0C9F43285848BBBB703A70CEE5824C4B3180
Authority key identifier: 40:79:0F:CE:3D:01:3B:59:26:A1:2B:72:10:2B:A0:EA:A1:CF:9D:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 40272
IP address blocks: 163.123.189.0/24 maxlen: 24
2620:b1:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:70:3a:70:ce:e5:82:4c:4b:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f64ffea-e706-4e90-bb07-255a657996ab
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=5a1fc238-4b11-46e5-8a0e-91cf0ae5b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:72:68:a3:3a:38:d5:1e:bf:30:21:45:83:
f3:fa:13:d8:92:1e:03:1e:2f:d0:de:f1:01:4f:31:
ba:76:5a:f0:6f:78:70:6b:5d:1d:c5:48:36:df:24:
03:3f:3b:f4:3e:13:5e:16:06:eb:cb:55:ea:6d:e6:
14:d5:3e:49:ad:a2:5a:df:14:4d:86:43:51:28:0e:
1b:53:ad:12:ca:41:5f:fc:24:12:a8:1c:c2:14:98:
f8:33:62:43:20:22:00:f7:df:1c:46:23:62:d8:ee:
a6:5a:6d:0a:94:51:80:ac:59:ad:a2:3b:2c:0e:0c:
37:fe:a4:f7:67:99:11:ec:9c:84:3e:18:97:e0:53:
ba:b2:93:75:50:2a:1d:1e:96:4e:97:00:1d:80:64:
3e:8c:6d:68:4f:5a:5a:bf:58:c3:13:83:dd:86:5a:
f9:9c:59:0e:21:4f:f7:9d:64:e5:33:cd:0d:08:9d:
3a:0c:0b:d8:c4:1f:89:c1:b7:9f:16:f6:48:ef:11:
44:6c:b0:b1:54:c2:49:db:bc:5f:21:da:be:55:e7:
e1:22:a8:47:32:06:2b:73:56:11:b8:15:f5:7b:00:
96:c4:3e:24:e4:63:f9:8f:de:9d:94:ff:ce:72:08:
b6:f5:c1:5d:0b:c6:95:de:61:8e:6b:95:ec:a8:de:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:A3:9D:01:72:0F:A8:E6:29:31:78:7A:9D:18:F2:35:66:F7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.crl
X509v3 Authority Key Identifier:
keyid:40:79:0F:CE:3D:01:3B:59:26:A1:2B:72:10:2B:A0:EA:A1:CF:9D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.189.0/24
IPv6:
2620:b1:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:3a:d6:21:03:b2:d1:fb:18:04:72:88:e0:47:c5:0d:6f:0b:
43:89:81:69:52:bf:2e:ac:76:56:14:3f:a3:98:0b:8f:d8:6a:
c8:82:e3:9c:fc:9a:d9:b2:65:cb:cc:b4:83:f5:8d:98:a0:f2:
7a:29:48:68:ac:e2:6e:01:6d:1e:22:50:f5:8b:ae:1c:20:fd:
ea:c9:12:22:13:6a:b6:24:21:fa:14:44:f6:c6:99:08:15:ba:
81:86:64:9c:a0:da:fa:d6:df:1e:b0:e1:80:2d:ce:87:1c:12:
11:85:71:a1:92:18:34:a8:4e:c5:a6:80:41:86:9b:5d:8d:62:
06:15:0e:f3:20:8f:6d:84:85:d6:80:92:c0:ba:d2:9c:7c:79:
70:ca:f9:97:33:49:11:3b:8d:60:ca:38:d9:02:af:7e:b7:be:
9a:1a:42:91:b3:c1:ab:bd:14:39:dc:57:c6:a4:f6:b2:a8:f4:
40:6e:dc:83:2f:9b:10:de:47:e6:9f:87:88:5f:17:e5:a8:54:
6c:ac:8b:8d:e3:5e:80:c0:c2:bd:d3:e3:76:83:8d:7e:18:cf:
0d:4b:af:43:f2:e8:a2:20:3c:e5:13:7d:77:fd:cb:b0:ff:8a:
4d:23:95:bb:9b:19:85:3b:b0:26:a5:42:7d:fe:d1:c1:e6:df:
07:31:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:48:03 2025 by rpki-client